AI Security Engineer — Remote | Contract-to-Hire

Santcore Technologies is seeking an AI Security Engineer for an enterprise security opportunity. The role focuses on monitoring, detecting, and responding to risks involving enterprise AI applications, agents, connectors, and cloud platforms, while developing security controls, detection capabilities, and incident response processes.

Responsibilities:

• Assess existing security tools and identify gaps in AI application monitoring and visibility
• Configure Cloud Access Security Broker (CASB) capabilities to discover and classify authorized and unauthorized AI applications
• Monitor enterprise AI applications, AI agents, connectors, and third-party integrations
• Establish AI usage baselines to identify suspicious or unusual activities
• Implement Data Loss Prevention (DLP) policies to identify and prevent sensitive data exposure
• Identify risks associated with shadow AI, unauthorized AI tools, and excessive application permissions
• Maintain an inventory of AI agents, OAuth-connected applications, third-party connectors, and Model Context Protocol (MCP) connections
• Review application permissions, access privileges, ownership, and approval status
• Identify over-permissioned AI agents and high-risk third-party integrations
• Develop monitoring policies and alerts for suspicious AI agent behavior
• Support security controls for AI APIs, service accounts, and enterprise application integrations
• Develop security detection rules, alerts, and threat-hunting queries for AI-related risks
• Monitor potential data exfiltration, prompt injection, and abnormal AI application activity
• Analyze security logs and integrate available AI platform audit data into enterprise monitoring systems
• Use Python or PowerShell for security automation, log analysis, and API integrations
• Collaborate with Security teams to investigate incidents and develop response procedures
• Document incident severity, escalation paths, and remediation recommendations
• Evaluate security risks associated with new AI tools, agents, connectors, and MCP servers
• Recommend appropriate security controls and approval conditions
• Support enterprise security policies, privacy requirements, and AI governance standards
• Document identified risks, security controls, and mitigation recommendations
• Prepare reports on AI usage, security trends, and unresolved risks
• Communicate security findings to technical teams, business stakeholders, and leadership

Requirements:

• U.S. Citizens, Green Card Holders, H4, or TN Visa Holders Only
• Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent professional experience
• Minimum 5 years of enterprise security engineering, security operations, or cloud security experience
• Hands-on experience with CASB, SIEM, and Data Loss Prevention (DLP) technologies
• Experience configuring application discovery, security policies, monitoring rules, and alerts
• Strong experience developing security detection and threat-hunting queries
• Hands-on scripting experience with Python or PowerShell for automation, log analysis, and API integrations
• Working knowledge of Identity and Access Management (IAM)
• Understanding of OAuth consent, application permissions, and service accounts
• Knowledge of AI security risks, including:

• Data leakage and data exfiltration
• Prompt injection
• Shadow AI
• Over-permissioned AI agents
• High-risk connectors and third-party integrations

• Strong troubleshooting, analytical, and problem-solving abilities
• Excellent written and verbal communication skills
• Ability to create technical documentation, security procedures, and incident response runbooks
• Ability to work independently and collaborate effectively with remote teams
• Hands-on experience with Microsoft Defender and Microsoft Purview
• Experience securing AI agents, MCP servers, third-party connectors, or AI APIs
• Familiarity with Microsoft 365 Copilot, ChatGPT EDU, or Box AI administration, auditing, and security features
• Understanding of the NIST AI Risk Management Framework (AI RMF)
• Familiarity with the OWASP Top 10 for LLM Applications
• Security certifications such as CISSP, CCSP, or relevant vendor certifications
• Experience working in higher education environments
• Familiarity with institutional security policies, privacy requirements, and enterprise AI governance